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IN THE SPECIFICATION 
Please amead the paragraph beginning on page 4, Htw 1 1 , as follows: 
FIG. 2 ahow eQs, gA-^B ^hnw a second example spreadsbeet with foraiulae 
embedded in some of the spreadsheet cells. 

Please amend the paragraph beginning on page 4. line 13, as follows: 

FIG. 3 shows the example spreadsheet of MG^flS5..2A=2E.with the formulae and I 
several cells hidden. I 

Please amend the paragraph beginning on page 4. line 1 5. as follows: . 

FIG. 1 showa nQs- 4A-4n ^"ihoy a cell relation graph for the spreadsheet of-HGr-Z- I 
FlGs. 2A-2R 

Please amend the paragraph beginning on page 4. line 16, as follows: 

FIG. 5 shows the example spreadsheet of HGr ^FIGs. 2A-2B i n a state of partial | 
construction. I 

Please amend the paragraph beginning on pa^ 5. line 28, as follows: 
FIGs. a-2A:2B.«nd 3 show how a user could constmct a graphical clock in Fonns/3. 
Consider clock 200's thirteen cells shown in PIGr^BQsO&z^wittx their fonnnlas. 
including two mput cells (upper left) (cells 205 and 30^ -206 mFir. 2AW h.> could 
cveatually be replaced with references to the system clock, one ootput ceU (middle left) (cell 
21 0 and formula 210a). and several cells used in intermediate calculations (right) (cells 2 1 5- 
224 and formulae a»^»«4«)^?^lq-^;^4a in FIG ?R> The tem, inpui cell refers to cells 
whose formulas conmio only constants. The lem, output cell lefore to cells not «ferenccd in 
any fomiula. After the programming is finished, the cells that calculate intermediate «sults 
can be hidden, and other colls rearranged, to reach the user view shown in FIG. 3. 

Please amend the paragraph beginning on page 8. line 4, as follows: 
Test adequacy criteria provide help in selecting test data and in deciding whether a 
program has been tested "enough." Test adequacy criteria have been well researched for 
imperative languages (e.g.. (Clarke89. Frankl88. N.afbs84, PctrySK))). whom they arc often 
defined on abstract models of programs rather than on code itself. An abstract model for 
spreadsheet languages is created, called a cell relation graph (CRG). A ORG is a pair (V, E). 
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where Visasetof/oW^^«^fc.a„dEisasetofdin«»d edges connecting pairsof 
elements in set V. PCG^Mepiete-FIOs. 4A-4B ^cpiot the CRG for Clock 200. PIG^ 
«>»H^i aQs.4A.4Bs1,ow the interreJation of each formula graph 205b. 206b, 2J0b. and 
215b-224b: which fonnula graphs depend on which other formula graphs. 

Plea« amend the pangraph beginning on page 8, line 13. as foUows: 
Each formula grapb in set V models flow of control within a cell's formula, and is 
compan*le to a contn,! flow graph mpiesenting a procedute in an unperative program 
(Aho86.Rapps85). "Hiere is one formula gmph for each eel lin the spreadsheet Theprocess 
Of translating an abstmcl syntax tree representation of an expression into is control flow 
graph representation is well known (Aio86); a similar translation applied to the abstract 
syntax tree for each fomtnla in a spreadsheet yields that formula's formula graph. For 
example, mQ.4^a ^f]Q^, 4^^r ^ .e formula gniphs for each of the cells in Clock 
200. delimited by dotted rectangles. In the fonnula graphs, nodes labeled "E" and "X" are 
cniry and exit nodes, respectively, and represent inhiation and termination of the evaluation 
of formulas. Nodes with multiple outages (represented as rectangles) are^re^c««. nodes. 
Otl«r nodes are computatio„ nodes. Edges within formula graphs represent flow of contrt>l 
between expressions, and edge labels indicate the value to which conditional expressions 
must evaluate for particuhir paths to be ta3cen. For example, formula graph 210b for 
CheClock includes entty node 405 {nwnbered 55), exit node 410 (numbered 59). and nodes 
415, 420. and 425 (numbered 56. 57. and 58, respectively). Formula graph 210b also 
includes edges 430. 435, 440, 445, and 450. 

Please amend the paragraph beginning on page 9, line 26, as follows: 
The set E of edges in the CRG. eel/ aepatde^ce edges, models dependencies between 
cells. Wftr^Mepi ^FTg,. 4A-4P fifipirt these edges by dashed lines. Each edge encode, the I 
fact that the desUnation cell refen. to the input cell in it, formula; Ihu.,. the arrows show ' 
direction of dataflow. Note that cell dependence information is typically available to 
evalnation engines within spreadsheet systems as a consequenci of the need to evaluate 
formulas; thus, this information need not be specially calculated for use in CRGs. 

Please amend the paragraph beginning on page 13, line 15. as follows: 
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Algorithm CollectAsaoc of Table 2 is triggered when a new fom,ola is added to 
collect ««v static du-associations. FIG. 6 shows a flowchart of algorithm Ccl lectAsaoc 

L.nes2-5(steps605and6lO)collec,du-as8oc,flt.on3involvingusesjnC. Lines 6-9 (steps 
6 15 and 620) collect du-associations involving definitions (of O in C. For example. .«femng 
back to FIG. 5. suppose that the most recent formula entered is that for cell minuteiT 515 
Note that its value is displayed, even though the spreadsheet ha« not been completely entered- 
when the evaluation engine is triggered to display this value, it collects CDtreaCo^sumar, ' 
CDirectProducers, CLocalDefs^M C.LocalUses for mlnuteY 515 (as done p«5vio«sIy for 
«he other cells on display when their formulas were entered). Called with cell minuteV 51 5. 
CollectAsaoc employs this information to collect six new du-associations. described 
using the node numbers of WGh>-F1Gs. 4A-4B (2. (19, 20). minute). 
(2.(19.21). ininut:e). (2, 20. minutie). (2, 2 1 . minute). (20. 50. minuteY). and 
(21, 50, minuteY). 

Please amend the paragraph beginning on page 1 7, line 19, as follows: 
To track execution traces, which in Task 3 will enable the incn^ental compntation of 
du-assoc,ations that have been exercised, it is sufficient to insert a probe into the evaluation 
engine. When eel! C executes, this probe recoitls the execution tmce on Cs fbnnula gr»ph 
storing it in C Tr<^e, adding only 0(l ) to the cost of execution. For example, in the case of 
Clock, at the nwmem depicted in FIG. 5, the execuUon trace stored for cell minuteY 515 
described in terms of He,-P»iljs.nodc ^wmbofs -numba,,. nf Prn^ ^ a...^ 
(18. 19. 20. 22). If the cell is subsequently reevaluated, the old execution trace is replaced 
with the new one. Storing only the most recent execution trace in C. Trace is Sufficient for 
coverage computation because the cumulative coverage in C.DVA is updated inctancntally 
durmg validation, as described in the discussion of Task 3. 

Please ani^end the paragraph beginning on page 23. line 1 1, as follows: 
Torenecr the new test adequacy status of the spreadsheet whenever a cell is modified 
the system must (1) update CTs static du^issociation and dynamic execution trace 
information, and (2) update the incised Oags on all du-associations affected by the 
modificatforv allowing calculation and display of new border and arrow colons to reflect the 
new «testedness» status of the spreadsheet. Validation tab statuses on cells that wc« 
dependent on (consumers of) C must also be adjusted, cbanging all checkmarks to question 
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marks rfthe ceB ^rns any exerci«d du-associations after affec«d associations have been 
«8et. or to blankif all the celPs exercised flags are «,w unset. (Because an of Cs d«- 

associatiomhave been reset, the validation ubforCis changed tt,blank.) Forexample in 
the conipleted clock spreadsheet of HS^nSs^^A^if 0,c user changes cell 
".inutex's 215 formula, then the du-a«soci«tjons involvmg mlnucex 215. and die 
validation statuses for mlnut ex 21 5. minuteHand 222, and theClock 21 0 must all be 
adjusted to blank. On the other hand. If the user changes the value of minute 205. the 
validation statiues for cells minutex 215, minutey 216. hou«e 217. houry 218. 
hourWlchFractlon 219. fraction 220, hourHand 221. minuteHand 222. «k1 
theciock 21 0 are adjusted to question marks or to blanks, depending on the cells ' other 
du-associations' exercised statuses. 
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